Managing Policies and Configuration Profiles

@NeiSpe77 Are labs on lab specific subnets? You could use. aNetwork Segment limitation if so. Otherwise a Static Computer Group is probably easiest since Group restrictions are only for User groups and not Computer groups.

Hi @NeiSpe77 ,

You can implement a Smart Group using Regex for Classet-Lab.

Previously, the naming convention was set as Classet-Lab-XX (where XX is a number). This makes it easier to manage if more Macs are added to the lab in the future.

For staff, if Device User & Location is available, you can create a Smart Group for staff based on position or department.

After that, you can create two configuration profile recipes, each assigned to the respective Smart Group.

This is the approach I have implemented in Classet, ensuring that each Classet has different settings for Lab, Teachers, and Staff.

You will use scopes, and how you set that up is really down to your needs.

• If it's just a few devices you can make a few static groups and put devices in those groups based on your needs and target policies and configurations to those groups specifically. This is not very scalable, but even in my environment I still manage my lab with a static group.
• If you want something scalable use smart groups, using the IP range, department, or something you can hook on to as the criteria for the smart group. 

Once you have the groups, set them as the targets and exclusions of your policies and configurations appropriately. 

You can't define a Smart Group using an IP range, but you can Limit the Scope of a Policy to a Network Segment that defines an IP range.